Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the groups shown in the following table.
The domain is synced to a Microsoft Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table.
You create an Information Protection label policy named Policy1.
You need to apply Policy1.
To which groups can you apply Policy1?
Labels can be applied to any group that has an email address.